Ethernet virtual private network debugging using intent graph data
A system includes a storage device configured to store intent graph data associated with a plurality of virtual networks and a plurality of network devices and processing circuitry in communication with the storage device. The intent graph data identifies a subset of the plurality of virtual networks associated with each network device. The processing circuitry is configured to determine whether the intent graph data indicates a first network device and a second network device are configured for a common virtual network, in response to determining that the graph indicates the first network device and the second network device are configured for the common virtual network, determine a network anomaly based on a comparison of first endpoint information obtained from the first network device and second endpoint information obtained from the second network device, and output an indication of the network anomaly.
1 . A system comprising:
machine-readable storage media comprising instructions,
wherein the machine-readable storage media is to store intent graph data associated with a plurality of virtual networks and a plurality of network devices, wherein the intent graph data identifies, for each network device of the plurality of network devices, a subset of the plurality of virtual networks associated with the network device; and
one or more processors implemented in circuitry, and having access to the machine-readable storage media, wherein the instructions are executable by the one or more processors to:
determine whether the intent graph data indicates a first network device and a second network device are configured for a common virtual network;
based on a determination that the intent graph data indicates the first network device and the second network device are configured for the common virtual network, determine a network anomaly is associated with the first network device based on a determination that first endpoint information obtained from the first network device does not include a media access control (MAC) address included in second endpoint information obtained from the second network device; and
based on the determination that the network anomaly is associated with the first network device, perform an automated diagnosis at the first network device to determine a network device anomaly.
2 . The system of claim 1 , wherein to perform the automated diagnosis at the first network device, the instructions are executable by the one or more processors to apply, based on a decision tree, one or more debugging processes to the first network device and the second network device to determine the network device anomaly.
3 . The system of claim 2 , wherein the one or more debugging processes are a subset of a plurality of debugging processes and each of the plurality of debugging processes in the plurality of debugging processes is associated with a node of the decision tree.
4 . The system of claim 2 , wherein the network device anomaly identifies one or more of a misconfiguration, a software bug, or a hardware bug.
5 . The system of claim 1 , wherein to determine whether the intent graph data indicates the first network device and the second network device are configured for the common virtual network, the instructions are executable by the one or more processors to determine whether the intent graph data includes a common virtual network identifier for the first network device and the second network device.
6 . The system of claim 1 , wherein the instructions are executable by the one or more processors to periodically obtain endpoint information from the plurality of network devices.
7 . The system of claim 1 , wherein to perform the automated diagnosis at the first network device, the instructions are executable by the one or more processors to execute one or more commands at the first network device.
8 . A method comprising:
determining, by one or more processors implemented in circuitry, whether intent graph data associated with a plurality of virtual networks and a plurality of network devices indicates a first network device and a second network device are configured for a common virtual network, wherein the intent graph data identifies, for each network device of the plurality of network devices, a subset of the plurality of virtual networks associated with the network device;
based on determining that the intent graph data indicates the first network device and the second network device are configured for the common virtual network, determining, by the one or more processors, a network anomaly is associated with the first network device based on determining that first endpoint information obtained from the first network device does not include a media access control (MAC) address included in second endpoint information obtained from the second network device; and
based on determining that the network anomaly is associated with the first network device, performing, by the one or more processors, an automated diagnosis at the first network device to determine a network device anomaly.
9 . The method of claim 8 , wherein performing the automated diagnosis at the first network device comprises applying, based on a decision tree, one or more debugging processes to the first network device and the second network device to determine the network device anomaly.
10 . The method of claim 9 , wherein the one or more debugging processes are a subset of a plurality of debugging processes and each of the plurality of debugging processes in the plurality of debugging processes is associated with a node of the decision tree.
11 . The method of claim 9 , wherein the network device anomaly identifies one or more of a misconfiguration, a software bug, or a hardware bug.
12 . The method of claim 8 , wherein determining whether the intent graph data indicates the first network device and the second network device are configured for the common virtual network comprises determining, by the one or more processors, whether the intent graph data includes a common virtual network identifier for the first network device and the second network device.
13 . The method of claim 8 , further comprising:
periodically obtaining, by the one or more processors, endpoint information from the plurality of network devices.
14 . The method of claim 8 , wherein performing the automated diagnosis at the first network device comprises executing one or more commands at the first network device.
15 . Non-transitory computer-readable storage media storing instructions, wherein the instructions are to configure one or more processors to:
determine whether intent graph data associated with a plurality of virtual networks and a plurality of network devices indicates a first network device and a second network device are configured for a common virtual network, wherein the intent graph data identifies, for each network device of the plurality of network devices, a subset of the plurality of virtual networks associated with the network device;
based on a determination that the intent graph data indicates the first network device and the second network device are configured for the common virtual network, determine a network anomaly is associated with the first network device based on a determination that first endpoint information obtained from the first network device does not include a media access control (MAC) address included in second endpoint information obtained from the second network device; and
based on the determination that the network anomaly is associated with the first network device, perform an automated diagnosis at the first network device to determine a network device anomaly.
16 . The non-transitory computer-readable storage media of claim 15 , wherein the instructions are to configure the one or more processors to apply, based on a decision tree, one or more debugging processes to the first network device and the second network device to determine the network device anomaly.
17 . The non-transitory computer-readable storage media of claim 16 , wherein the one or more debugging processes are a subset of a plurality of debugging processes and each of the plurality of debugging processes in the plurality of debugging processes is associated with a node of the decision tree.
18 . The non-transitory computer-readable storage media of claim 16 , wherein the network device anomaly identifies one or more of a misconfiguration, a software bug, or a hardware bug.
19 . The non-transitory computer-readable storage media of claim 15 , wherein to determine whether the intent graph data indicates the first network device and the second network device are configured for the common virtual network, the instructions are to configure the one or more processors to determine whether the intent graph data includes a common virtual network identifier for the first network device and the second network device.